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DETAILED ACTION 



1. This Office Action is responding to the Amendment received on 08/02/06. 

2. Claims 1-7, 9-12, 14-21 are pending. 



Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 

all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 1-7, 9-12, 14-17, and 19-20 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Venkatesan et al, US Patent No. 6898706B1, herein 
after "Venkatesan", in view of Matsumoto et al, US Patent No. 6286008, 
hereinafter "Matsumoto". 

5. As per Claim 1: 

Venkatesan discloses "A method of providing a content, characterized in that: 
when a content is transmitted to a user, an electronic watermark for preventing 
execution of said content is embedded in said content and at least information 
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associated with the user, to whom said content is to be transmitted, is added to said 
content; and 

when said content is executed, said information associated with the user who 
has received said content is checked transmitting end 

when said content is executed, said information associated with the user is 
checked at a receiving ends : and 

the execution of said content is allowed by removal of said electronic watermark if and 
only if the result of the checking indicates that said content is an authorized content" in 
(Col 22 lines 36-54); 

(59) Subsequently, when the user stationed at the client PC attempts to 
access any watermarked object, the client PC, as indicated in block 590, will 
access the encrypted object, C.sub.i, from encrypted store 580 (or, if the 
object does not then reside in store 580, will prompt the user to either 
download that object from the publisher's web site or insert a diskette 
containing that object into the client PC for subsequent access). Assuming the 
encrypted object then resides within store 580. that object will be accessed as 
symbolized by line 587. In addition, the client PC. through execution of block 
590. will determine whether a license (L.sub.i) then exists in license database 
570 for this object. If such a license is found, the license is accessed as 
symbolized by line 577. Thereafter, block 590 will verify the license and, if 
the license is valid, decrypt the object, appearing on line 587. and instruct 
the O/S in client PC, sub. i to utilize the resulting decrypted fingerprinted, 
watermarked object in accordance with the rights specified in the license. 

However, Venkatesan does not teach of " when said content is executed, said 

information associated with the user is checked at a receiving ends;" 

Nevertheless, Matsumoto discloses a method of deciphering content if the client 

apparatus is authenticated with server and receiving user information from the server to 

authenticate at the client" in (Col 11 line 60 to Col 12 line 30). 

(12) In the server side apparatus 2, when the user ID UID and data C(R1. Su) 
are received from the user side apparatus 1 through the communication line 3 
(Step S21), the execution program EP2 causes a common secret information search 
unit 41 to search the user ID UID of plural users registered and stored in a 
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data base 42 to have it take out the corresponding registered common secret 
information Ss from the registered common secret information (Step S22). And, 
the execution program EP2 causes a data inverse conversion unit 43 to convert 
inversely the received data C(R1, Su) with the registered common secret 
information Ss taken out from the data base 42 to obtain a random number R1 
(Step S23). 

(13) Next, in the server side apparatus 2, the execution program EP2 newly 
causes to generate the random information (random number) R2 (Step S24), and 
the random number R1 obtained by the data inverse conversion unit 43 and the 
random number R2 are concatenated, the resulting data is read out from the data 
base 42, and using the registered common secret information Ss read out from 

the data base 42, the concatenated data is converted by a data conversion unit 
44 to generate a data C(R2//R1, Ss) (Step S25). which is caused to transmit to 
the user side apparatus 1 through the communication line 3 (Step S26). 

(14) At the time when the data C(R2//R1, Ss) is generated in the data 
conversion unit 44, if money charging processing is necessary, such processing 
is executed. 

(15) When this data C(R2//R1, Ss) is received (Step S15), in the user side 
apparatus 1, the execution program EP1 causes a data inverse conversion unit 32 
to make inverse conversion with the common secret information Su inputted 
previously by the user himself to obtain a random number R1 (Step S16). The 
execution program EP1 compares the random number R1 obtained in the data 
inverse conversion unit 32 with the random number R1 generated previously by 
its own at the comparing unit 33 (Step S17), and if they show coincidence, then 
the program starts the self-uncompression program UP to have the compressed 
contents CC start to be uncompressed (Step S18). 



Therefore, it would have been obvious at the time of the invention was made for 
one having ordinary skill in the art to modify Venkatesan's invention to incorporate 
Matsumoto's teaching of authenticate request to the server and also authenticate again 
at the local host prior decrypting the watermarked content. The Matsumoto's teaching 
adds additional security layer for accessing the content and also preventing the pirate 
copy of the watermarked content being executed without any knowledge of the provider. 
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6. As per Claims 7 and 12: 

Venkatesan discloses "A content providing system according to one of Claims 4 and 5, 
wherein: when the information associated with a user received from a user terminal is 
registered, in advance, in the user database of said content provider, said content 
provider transmits to said user a card on which a card ID is stored" in (Col 15 lines 5-18, 
Media card and Card ID is the watermark key); and Matsumoto discloses "said 
information associated with the user includes at least a user name, a password, a 
device ID uniquely assigned to a device of said user, and said card ID" in (Col 11 lines 
60-67). 

7. As per Claims 1-5, 9-10, and 14-15: 

Venkatesan discloses "A content provider connected to at least one user terminal via a 
network, said content provider comprising: 

a content server which stores plural kinds of digital contents" in (Col 11 lines 1- 
10); and 

"a user database for registering, in advance, information associated with a user 
received from said at least one user terminal" in (Col 16 lines 60-67), wherein: 

when said content provider receives from a user terminal a request for providing 
a particular content, said content provider requests said user terminal to resend the 
information associated with said user and transmits the requested content:" in (Col 22 
lines 5-35); and 

(57) Subsequently, the user, through client PC. sub. i, establishes an Internet 
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session with the publisher's web server and as. indicated by block 540, 
electronically transacts with that server to obtain a license to use the 
previously downloaded object . In that regard, the user is presented through a 
web page generated by the publisher's web server with a menu, list or other 
graphical selection mechanism through which (s)he can select an extent to which 
(s)he wants to access and use that object, i.e., to obtain so-called "rights". 
Once the user makes the selection and authorizes electronic payment for the 
desired rights, the browser, based on embedded code in the web page, transmits, 
to the publisher's web server, the rights selection, payment authorization and 
a computer identification (CID) associated with client PC.sub.i. Each client 
PC has a unigue CID. The CID can be formed, in whole or in part, by 
illustratively a processor serial number (PSN) that has been embedded into the 
processor itself, e.g., processor 420 of client PC 400 shown in FIG. 4, during 
its manufacture. 



when the content transmitted from said content provider is executed, checking is 
performed as to whether the information associated with said user included in said 
content is consistent with the information stored in the user terminal, and said content 
provider determines, in accordance with the result of the checking, whether to transmit a 
content execution permission command to said user terminal" in (Col 22 lines 35-54); 

(59) Subsequently, when the user stationed at the client PC attempts to 
access any watermarked object, the client PC. as indicated in block 590. will 
access the encrypted object. C.sub.i, from encrypted store 580 (or, if the 
object does not then reside in store 580, will prompt the user to either 
download that object from the publisher's web site or insert a diskette 
containing that object into the client PC for subsequent access). Assuming the 
encrypted object then resides within store 580. that object will be accessed as 
symbolized by line 587. In addition, the client PC. through execution of block 
590. will determine whether a license (L.sub.i) then exists in license database 
570 for this object. If such a license is found, the license is accessed as 
symbolized by line 577. Thereafter, block 590 will verify the license and, if 
the license is valid, decrypt the object, appearing on line 587. and instruct 
the O/S in client PC.sub.i to utilize the resulting decrypted fingerprinted, 
watermarked object in accordance with the rights specified in the license. 



wherein: said content provider further includes encryption means for encrypting 
the information associated with a user and embedding an electronic watermark in said 
content for preventing execution of said content, and, when said content provider 
receives from a user terminal a request for providing a particular content, said content 
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provider transmits the requested content after combining the requested content with the 
information associated with said user and with the electronic watermark" in (Col 22 lines 
17-35); and 

(58) Once this information is transmitted to the publisher's web server, that 
server issues, as indicated by block 550 shown in FIG. 5, an electronic license 
(Lsub.i) and transmits, as symbolized by line 555, that license to the client 
PC. This license, which is signed by the publisher, specifies, among other 
parameters-which have been alluded to above and will be discussed in detail 
below, the specific rights of access and use that have been accorded to client 
PC.sub.i for the downloaded object along with a secret key to decrypt this 
object. This key, as previously noted, is a symmetric encryption key, Le- 
the same key previously used by the publisher to encrypt the object. Upon 
receipt of this license, the browser routes this license, as symbolized by line 
565, to encrypted store 610 and specifically stores this license, within 
license database 570. for subseguent access. Store 570 contains a repository 
of licenses for each watermarked encrypted object which the user has downloaded 
to client PC.sub.i or otherwise has in his possession and desires to access 
through this PC. 



Venkatesan discloses a capability of checking the which user associates to which 
client pc through the use of PCID in the user database in (Col 16 lines 55-67) 

However, Venkatesan does not discloses "wherein said content execution 
permission command transmitted from said content provider serves to remove said 
electronic watermark for allowing execution of said content. 

said information associated with said user after checking that said information 
associated with said user is consistent with the information registered in said user 
database" 

Nevertheless, Matsumoto discloses a method of authenticating to the server from a 
client apparatus, wherein user information is transmitted to the server for authentication. 
Once the authentication at the server is successful, the server transmitting back an 
authorization to authenticate at the client apparatus before allowing the deciphering of 
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the watermarked or encrypted content for execution" in (Col 1 1 line 60 to Col 12 line 
30). 

(12) In the server side apparatus 2, when the user ID UID and data C(R1, Su) 
are received from the user side apparatus 1 through the communication line 3 
(Step S21), the execution program EP2 causes a common secret information search 
unit 41 to search the user ID UID of plural users registered and stored in a 

data base 42 to have it take out the corresponding registered common secret 
information Ss from the registered common secret information (Step S22). And, 
the execution program EP2 causes a data inverse conversion unit 43 to convert 
inversely the received data C(R1, Su) with the registered common secret 
information Ss taken out from the data base 42 to obtain a random number R1 
(Step S23). 

(1 3) Next, in the server side apparatus 2, the execution program EP2 newly 
causes to generate the random information (random number) R2 (Step S24), and 
the random number R1 obtained by the data inverse conversion unit 43 and the 
random number R2 are concatenated, the resulting data is read out from the data 
base 42, and using the registered common secret information Ss read out from 

the data base 42, the concatenated data is converted by a data conversion unit 
44 to generate a data C(R2//R1 , Ss) (Step S25). which is caused to transmit to 
the user side apparatus 1 through the communication line 3 (Step S26). 

(14) At the time when the data C(R2//R1, Ss) is generated in the data 
conversion unit 44, if money charging processing is necessary, such processing 
is executed. 

(15) When this data C(R2//R1, Ss) is received (Step S15), in the user side 
apparatus 1, the execution program EP1 causes a data inverse conversion unit 32 
to make inverse conversion with the common secret information Su inputted 
previously by the user himself to obtain a random number R1 (Step S16). The 
execution program EP1 compares the random number R1 obtained in the data 
inverse conversion unit 32 with the random number R1 generated previously by 
its own at the comparing unit 33 (Step S17), and if they show coincidence, then 
the program starts the self-uncompression program UP to have the compressed 
contents CC start to be uncompressed (Step S18). 



Therefore, it would have been obvious at the time of the invention was made for 
one having ordinary skill in the art to modify Venkatesan's invention to incorporate 
Matsumoto's teaching of authenticate request to the server and also authenticate again 
at the local host prior decrypting the watermarked content. The Matsumoto's teaching 
adds additional security layer for accessing the content and also preventing the pirate 
copy of the watermarked content being executed without any knowledge of the provider. 
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8. As per Claim 11: 

Matsumoto discloses "A content providing system according to one of Claims 9 and 10, 
wherein said information associated with the user includes at least a user name, a 
password, and a device ID uniquely assigned to a device of said user" in (Col 11 lines 
60-67). 

9. As per Claims 16 and 19: 

Venkatesan discloses "The method of claim 1, wherein when the result of the checking 
indicates that said content is an authorized content, key information for removal of said 
electronic watermark is transmitted to the user" in (Col 15 lines 5-20). 

10. As per Claims 17 and 20: 

Venkatesan discloses "The method of claim 16, wherein the key information represents 
a data location of said content at which the electronic watermark is embedded" in 
(Abstact). 
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11. Claims 18 and 21 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Venkatesan et al, US Patent No. 6898706B1, herein after "Venkatesan", 
in view of Matsumoto et al, US Patent No. 6286008, hereinafter 
"Matsumoto", and further in view of Ishii, US Patent No. 5768389. 

12. As per Claims 18 and 21: 

Venkatesan does not discloses "The method of claim 16, further comprising the step of 
deleting the key information by the user after removal of the electronic watermark. 
However, Ishii discloses a method of deleting key after decrypting the data in (Col 22 
lines 55-62) > 

Therefore, it would have been obvious at the time of the invention was made for 
one having ordinary skill in the art to incorporate Ishii's teaching of key deletion for safe 
guarding the decryption key from apprehension. 

Response to Arguments 

13. Applicant's arguments, see Amendment, filed 08/02/06, with respect to the 
rejection(s) of claim(s) 1-7, 9-12, 14-21 under U.S.C 102 and 103 have been 
fully considered and are persuasive. Therefore, the rejection has been 
withdrawn. However, upon further consideration, a new ground(s) of 
rejection is made in view of Venkatesan, Matsumoto, and Ishii. 
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14. Any inquiry concerning this communication or earlier communications 
from the examiner should be directed to Linh LD Son whose telephone 
number is 571-272-3856. The examiner can normally be reached on 9-6 (M- 



If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on 571-272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



Linh LD Son 
Examiner 
Art Unit 2135 




